Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability

2010-05-25 Thread info
Not working , Tested on : XpSp2 , IE6

Re: Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability

2010-05-25 Thread Jabłoński , Paweł
Not working at my environment: Tested on Firefox 3.6.3 (Linux). OWA version: 8.2.254.0 Exception type: Microsoft.Exchange.Data.Storage.CorruptDataException. OWA uses System.Convert.FromBase64String(String s) for parsing the address, so even when you try to put the representation there, you sho

Microsoft Outlook Web Access (OWA) v8.2.254.0 "id" parameter Information Disclosure Vulnerability

2010-05-21 Thread praveen_recker
$$ "Microsoft Outlook Web Access (OWA) version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$ There is an information disclosure vulnerability in "Microsoft Outlook Web Access (OWA) version 8